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This Invention relates to authenticator devices 
that are of the kind wtilch carries Information in a 
visual format and which Includes a sheet of a 
medium that has variable translucency from one 
location to another of the sheet, and a machine- 
readable record of representations of said trans- 
luency as previously sensed at Identified Iocs* 
tions of the sheet The Invention also relates to 
authenticating methods and processors for such 
devices. 

Authentlcator devices of the above-specified 
kind, and methods and processors for authen- 
ticating them* are known for example from 
WO— A— 8200082. Two forms of such authen- 
tlcator device and both Involving a paper sheet 
that carries printed Information, are described In 
detail in WO— A— 8200062, ons a product tag or 
label, and the other an Identification card. In each 
case, representations of translucency of the paper 
sheet at identified locations are recorded on the 
device itself. In the case of the tag In printed form, 
and in the case of the identification card In a 
magnetic stripe. The authenticity of the device Is 
checked by comparing fresh sensings of the 
translucency at the identified locations of the 
sheet with the recorded representations as read 
out from the record, 

Authentication carried out in this way Is effec- 
tive for verifying that the authenticates device is 
genuine, but there is the problem that it may not 
always be effective to detect situations in which 
the printed or other visual information carried by 
the device has been modified 

It is an object of the present invention to 
provide an authenticate device, and an authen- 
ticating method and processor, that enable this 
problem to be overcome, or at least reduced. 

According to one aspect of the present inven- 
tion, an authenticates device of the said above- 
specified kind Is characterised In that the recorded 
representations are combined in the machine- 
readable record with data related to a previously 
sensed state of said Information. 

Many forms of authentlcator device are used to 
provide data of financial, commercial or legal 
significance. For example, stock certificates and 
other forms of financial paper provide a record of 
ownership, but also carry significant or critical 
Information concerning that ownership. A stock 
certificate might designate a certain individual as 
the owner of a specific number of shares In an 
Identified company, and relate such data or Infor- 
mation to a specific certificate number. The 
present invention enables the provision of a 
certificate or other authentlcator device that Is 
capable of being readily authenticated as to both 
Its genuineness and the Information It carries. 

In the latter respect, and moreover according to 
another aspect, the present invention relates to a 
method of authenticating an authenticates device 
of the said above-specified kind, In which 
representations of said translucency as sensed at 
Identified locations of the sheet are read from the 



machine-readable record of the device and are 
compared respectively with translucency 
representations freshly sensed at said locations, 
and In which Indication of authenticity of the 

s device Is provided In dependence upon the result 
of the comparison. According to this aspect of the 
present Invention, the method Is characterised In . 
that data which Is combined with the read-out 
representations In the machine-readable record is 

10 also read out and compared with data freshly- 
derived from the said Information carried by the 
device, and that the provision of said indication of 
authenticity te also dependent upon the result of 
this latter comparison. 

rs With this method there is the advantage that 
the Indication of authenticity Is dependent on 
both comparisons, and so in a simple manner can 
provide verification both as to the genuineness of 
the device and the Information it carries. 

to At least one of the locations where translucency 
Is sensed, may, with advantage, lie within a 
region of the sheet that contains Indicia 
representing the said information, such that the 
representation of sensed translucency at this 

25 location is affected by at least one of the Indicia, 
This representation of translucency will thus be 
related both to the translucency of the sheet and 
to at least part of the information content The 
comparison between the freshly-sensed and 

3o recorded representations of translucency may in 
this case reveal whether there has been Inter- 
ference with the information and/or the substance 
of the device- This, then, provides added, sup- 
plementary safeguard to that afforded by the 

$6 comparison between the freshly-derived and 
recorded data. 

As a further safeguard, the translucency- 
representatione and the data read out from the 
machine-readable record may be In encrypted 

40 form, and may then be submitted to decryption 
before they are compared with the freshly-sensed 
representations and freshly-derived data respec- 
tively. 

According to a further aspect of the present 

45. invention there Is provided a processor for 
authenticating a device of the said above- 
specified kind, which Includes reading means for 
reading out the said translucency representations 
from the machine-readable record, sensing 

so means for freshly sensing the translucency 
representations at said identified locations of the 
sheet and comparator means for comparing the 
freshly-sensed translucency representations with 
the read-out translucency representations to pro 

es vide an indication of authenticity of the device in 
dependence upon the result of the comparison, 
and which Is characterised in that the processor 
also includes means for sensing said information 
carried by the device to derive data freshly In 

eo accordance therewith, and that the reading 
means reads out from the machine-readable 
record data combined with the read-out trans- 
lucency representations, and that the comparator 
means compares the freshly-derived data with 

es the read-out data and provides said Indication In 
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dependence upon the result of this comparison at 
well as upon the result of the comparison 
between the freshly-sensed and read-out trans- 
lucency representations. 

The machine-readable record may be recorded 
In a magnetic stripe of the device, and In this case 
the said reading means may be a magnetic-stripe 
reader. An optical reader may be used for sensing 
said Information from the device. 

An authentlcator device, and a method and 
processor for authenticating such a device, all In 
accordance with the present Invention, will now 
be described with reference to the accompanying 

drawing, In which: 

Rgure t Is a plan view of the authenticator 
device; 

Figures 2 and 3 are sectional views taken on the 
lines 2—2 and 3-3 respectively of figure 1; 

Rgure 4 Is a fragmentary view of a recording 
format of the authentlcator device of Rgure 1 ; 

Rgure 5 Is a block diagram of a system for 
producing authenticator devices of the form 
shown In Rgure 1; and 

Rgure 6 Is a block diagram of a processor for 
authenticating the authentlcator device of Rgure 
1. 

Document media, data formats, and operating 
systems structured In accordance with the 
present invention, may be embodied In a wide 
variety of forms, some of which may be quite 
different from those of the disclosed embodi- 
ment Consequently, the specific structural and 
functional details disclosed herein are merely 
representative; yet in that regard, they are 
deemed to afford the best embodiment for pur- 
poses of disclosure and to provide a basis for the 
claims herein which define the scope of the 
present Invention. 

Referring initially to Rgure 1, en Illustrative 
document Is represented in the form of an Iden- 
tification card for a specific individual. The card C 
is a laminate article Incorporating a basic sheet, 
e*g. a bond paper sheet 15 (see figures 2 and 3) 
along with certain other media functional in verifi- 
cation operations as explained In detail below. 

The format of the card C accommodates per- 
sonal identification for authorization and may, for 
example, be embodied as a driver's license. Of 
course, aspects as disclosed herein may be read- 
ily adopted for use In a wide variety of documents 
as indicated above including passports, valuable 
paper, financial cards and so on. 

In the Illustrative form, the card C carries print 
16 (upper left) Indicating the name of the assigned 
holder along with a photographic likeness 17 
(right). The print 16 and the likeness 17 may be 
variously deposited on the sheet of bond paper 15 
(figure 3). 

The genuineness of the card C Is manifest by an 
Individual characteristic of the card Specifically, 
the card C Is unique by reason of the opacity 
pattern of the paper sheet 15. Such an individual 
uniqueness characteristic may be utilized to pro- 
vide signals for registration and comparison with 
similar data from subsequent observations. 
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Exemplary detailed formats and structures for 
such sensing and comparison of a uniqueness 
characteristic ere disclosed In United States 
Patent 4,423,416, Non-Counterfehable Document 

6 System. In relation to the present Invention, it is 
Important to appreciate that the card C embodies 
. a substantially unique, machine-readable, anti- 
counterfeit characteristic. In the disclosed 
embodiment, the uniqueness characteristic 

to Involves the document content in different ways. 
That Is, the print 16 and the likeness 17 alter the 
opacity or translucency of the bond paper sheet 
16 In certain specific areas. Consequently, over- 
lays, erasures, or other modifications of the print 

1$ 16 or the likeness 17 will tend to alter the trans- 
lucency of the paper sheet 15 at the points of 
alteration. Accordingly, a preliminary safeguard is 
provided with respect to changes of the statistical 
data represented by the print 16 and the likeness 

20 17. 

In addition to the print 16 and the likeness 17, 
the card also carries data recorded on a magnetic 
stripe IB which Is affixed to the card In a conven- 
tional fashion. The magnetic stripe 18 records: 

is dock signals, any of a variety of statistical data, 
and encrypted composite data for verifying the 
authenticity of the card C both with regard to 
substance and content Specifically, character 
uniqueness data (indicating a genuine card C and 

so not a counterfeit) is combined with critical statisti- 
cal data to provide composite data which is 
encrypted and recorded on the magnetic stripe 
18. That encrypted data is subsequently sensed, 
decoded and separately compared with freshly 

ss sensed, similar data to manifest: (1) that the card 
C Is the genuine article, and (2) that the critical 
statistical data on the card has not been modified. 
Such verification establishes the credibility of the 
critical data to a level where It may be used for 

40 reliable direct input to a machine processor. 

Pursuing an exemplary format of a card C as a 
driver's license, the document Is often used for 
ancillary Identification. For example, a driver's 
license often is used to confirm that a person has 

45 attained maturity, and accordingly, may legally 
enter into various transactions. In that regard, the 
print 16 states the assigned holder's name, "John 
J. Jones", his birthdate, "12-07-52", and an 
additional element of arbitrary statistical data, 

60 "JIE". In accordance herewith, the critical data 
comprising the birthdate in the form of printed 
Intelligence Is verified to be unaltered on the basis 
of two separate and distinct tests. 
One test to verify that the birthdate hes not 
65 been modified Is Involved with the uniqueness 
characteristic of the card C In that regard, data 
locations D1, D2, D3 and D4 (Rgure 1, each 
indicated by an "X") are designated as the test 
locations at which the translucency of the card is 
a machine sensed to provide a unique anti- 
countarfeft characteristic. The location D3 
superimposes the critical data of the birthdate to 
monitor that location. A second test Involves data 
which Is merged with uniqueness data then 
$5 encrypted to a complex form. Such data la tested 
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with freshly sensed data after being decoded and 

Segregated. 

In view of the above preliminary explanation of 
functional aspects of the card, consider now Its 
composition details by referring somewhat simul- 
taneously to Figures 1,2 and 3. : 

The paper sheet 15 In the card C has a reliably 
repeataWe, machine-readable characteristic e.g. 
variation In opacity. To observe an example of 
such a uniqueness characteristic It Is simply 
necessary to hold a sheet of bond paper before e 
light source and notice the considerable variation 
in the opacity pattern. That characteristic has 
bean recognized as an effective basis for anti- 
counterfeit uniqueness data as disclosed In detail 
in the above-referenced patent 4,423,415, 

The paper 15 comprises the core of the card C 
and extends over the full area of the card. While 
bond paper has been determined to possess an 
effective uniqueness characteristic various other 
materials and structures have also been recog- 
nized to possess the requisite characteristic. 

The full area of the card C Is also occupied by a 
pair of external, dear plastic sheet laminates 19 
and 20. In addition to sealing the paper sheet 15, 
the laminate 20 also carries the magnetic stripe 18 
as shown. In general, techniques for the produc- 
tion of laminate identification cards incorporating 
printed material and magnetic stripes are very 
well known in the art 

At this juncture, identification of specific data 
elements and the similarly identified repre- 
sentative signals will be helpful. Accordingly, the 
following designations are used herein: 

CS— dock pulses for timing operations 
recorded on the stripe 18 

CW— Encrypted data recorded on the magnetic 
stripe 18 and decodabte to provide the following: 

AL— Location of character uniqueness data, 
designating locations D1, 02, D3 and D4 (Figure 1) 

CC— Uniqueness character data, sensed from 
locations D1, D2, D3 and D4 (Figure 1) 

SO — Critical statistical data, representing the 
blrthdate of printing 16 (Figure 1 ) 

CC' — Freshly sensed uniqueness character data 
sensed from locations D1, D2, D3 and D4 

SO'— Freshly sensed critical statistical data 
representing the blrthdate of printing 16 (Figure 1 ) 

DS — Miscellaneous statistical data, generally 
not of a critical nature 

ta—tx— Timing signals defining specific oper- 
ating states 

Referring now to Figure 4, a fragment of the 
magnetic stripe 18 Is represented. The first sec- 
tion 22 (left) of the magnetic stripe 18 carries data 
to Initialize the sensing operation by a magnetic 
stripe reader. Such formats and the techniques 
associated with them are well known In the art 
Accordingly, an Initializing section 22 occupies 
the leading edge of the stripe 18 (left as Illus- 
trated). 

Following the initializing section 22, the lower 
portion of the stripe 18 records dock pulses CS In 
a track 24 while the upper portion records data in 
a track 26. The use of recorded dock pulses to 
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synchronize and control data flow Is well known 
In the art. ' 

An Initial portion 28 of the data track 26 carries 
miscellaneous statistical data DS. Such data may 

B take a verify of forms, as Information of general 
or supplemental Interest regarding the card C as a 
document the magnetically recorded statistical 
data OS may be redundant, lnduding the name of 
the assigned holder of the card, his blrthdate, his 

10 account number, and any of a variety of other 
Information. 

Following the portion 28 of the magnetic stripe 
18, a portion 30 records encrypted data CW which . 
is derived from and is reconstructable to manifest 

rs component data indudlng: address data AL 
(spedfying locations 01, 02, 03 and 04), 
counterfeit characteristic data CC, and critical 
statistical data SO. 
Commenting on the data signals, the 

so uniqueness characteristic data CC actually manif- 
ests the signal levels (scale of ten) sensed at the 
locations 01, 02, 03 and 04 indicated on the card 
C. The critical statistical data SD represents the 
blrthdate "12-07-52" of the assigned card holder 

25 as Indicated by the printing 16 (Figure D.The data 
CC and SD are designated by prime marks, e.g- 
CC' and SO' when sensed later for comparison 
with data from the magnetic stripe, i.e. data CC 
and SD. 

30 Preliminarily, consider an exemplary use of the 
card C by a holder presenting the card to establish 
that he has attained his maturity. The magnetic 
stripe would be sensed to provide encrypted 
signals CW. The signals CW would be de- 

ss encrypted to provide the address signals AL the 
uniqueness characteristic signals CC, end the 
critical statistical data SO. The address signals AL 
designate the locations 01, 02, 03 and D4 which 
are sensed to provide freshly sensed signals CC'. 

40 Also, an optical reader senses the critical statisti- 
cal data SO' representing the blrthdate or ft is 
provided by manual Input Test comparisons are 
then performed for the signals CC with CC' and 
SD with SO'. Favorable comparisons of the data 

45 sets indicate that: (1) the substance composition 
of the document Is genuine and (2) the critical 
statistical data has not been modified. Such posi- 
tive results would also verify the card to the 
extent that the critical statistical data from the 

so card can be accepted with reasonable certainty 
and used directly for machine processing. 

The disdosed embodiment does not particu- 
larly treat the question of whether the person 
presenting the card C is Its assigned holder. Of 

ss course, the photographic likeness 17 is helpful In 
that regard If the transaction is personally moni- 
tored. Alternatively, well known personal identifi- 
cation number techniques can be incorporated 
and used in conjunction with the disdosed 

eo embodiment 

In view of the above Introductory explanations 
of the card C and Its use, systems will now be 
considered for produdng the card C and authen- 
ticating It In use. In that regard, reference initially 

as will be made to Figure 5 for an explanation of a 
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structural system for completing the cards C In 
accordance with Hgure 1. The raw cards would be 
as physically represented In Rgure 1 bearing the 
print 16, the likeness 17, end the magnetic stripe 
18; however, without the megnetic stripe 
recorded. 

Preliminarily, It Is helpful to recognize that 
signals from three sources are provided for 
recording the stripe 18. An Independent input 
e^g. terminal, provides the address data AL and 
the miscellaneous statistical data DS. The trans- 
lucency of the card C Is sensed at locations D1, 
D2, D3 and 04 to provide the signals CC. Finally, 
the printing 17 of the card C Is sensed to provide 
the critical statistical data signals SD repre- 
sentative of the birthdate "12-07-62". 

A card C (Figure 5, lower right) Is symbolically 
represented to be received by a card mechanism 
44. Essentially, various units are well known in the 
prior art which Include control elements and have 
the capability of transporting, sensing and other- 
wise manipulating a document as the card C 
Details of such e mechanism are disclosed in the 
U-S. Patent 4,423,415 referenced above. The card 
mechanism provides timing signals t and directly 
Involves other components as indicated by 
dashed lines 45, Specifically, the card mechanism 
44 Is integral with an optical reader 46, a terminal 
or data Input device 47, a uniqueness characteris- 
tic sensor 48, and a magnetic recorder 49. These 
units sense and record the card C as it is passed 
through the mechanism 44. The optical reader 46 
senses the critical statistical data SD, e.g. the date 
"12-07-52" from the card. The device 47 provides 
the address signals AL along with the miscellane- 
ous statistical data DS. The sensor 48 provides the 
uniqueness characteristic signal CC Processing 
end movements of these signals will now be 
considered. 

The address signals AL from the device 47 are 
set in a register 52 along with the critical data 
signals SD from the reader 46 during a timing 
interval ta. From the register 52, the address 
signals AL are provided to the uniqueness charac- 
teristic sensor 48 which senses the card C at the 
locations D1, D2, D3 and D4 (Rgure 1) providing 
uniqueness characteristic signals CC in a digital 
format The characteristic sensing operation Is 
performed by the sensor 48 during the interval of 
timing signal tb with the resulting signals CC 
provided to a compiling register 64 during the 
timing signal tc as illustrated in Rgure 5. During 
the same Interval tc, the address signal AL and the 
critical data signals SD are also received in the 
compiling register 54, 

The data assembled in the register 54 (signals 
AL SO and CC) Is supplied to e cryptographic 
encoder 56 where It Is merged and encoded using 
any of a variety of encryption techniques to 
provide decodable, representative signals CW. In 
that regard, a variety of cryptographic encoders 
are well known In the prior art and may be 
employed in embodiments of the present inven- 
tion. Thus, the cryptographic encoder 56 operates 
during the interval of the timing signal td and 



supplies the signals CW representative of the data 
AL SD and CC combined In a decodable format 
From the encoder 56, the representative signals 
CW are supplied to a register 57 which also 

$ receives the miscellaneous date signals DS. The 
latter signals DS are provided to a register 60 
(Rgure 6, center right! from the Input device 47 
during the timing interval ta. Accordingly, such 
signals are ready for movement to the register 57 

to during signal to along with the signals CW. 

During the Interval of timing signal tf, the 
contents of the register 64 Is supplied to the 
magnetic recorder 49 for transducing the data 
(CW and DS) onto the magnetic stripe 18 (Figure 

is 1 ) of the card C. Accordingly, the card C (Rgu re 1 ) 
is completed with the magnetic stripe 18 recorded 
In the format of Rgure 4. The card C may now be 
delivered to an assigned holder, Le, one "John J. 
Jones", bom "12-07-52" with the likeness 17 as 

20 depicted on the card C 

In use, the card C is authenticated by decoding 
the Integrated encrypted data to provide separate 
component information for Individual compari- 
sons. Specifically, after decoding and separation, 

26 the anti-counterfeit or uniqueness information 
(data CC) is employed in a test to determine that 
the card Is genuine. After decoding and separa- 
tion, the critical statistical Information (data SD) Is 
employed in a test to verify that such information 

30 on the card has not been altered. A system for 
performing the authentication is illustrated in 
Rgure 6 and will now be considered. 

To sense end validate a card C (upper left), it is 
placed In an authenticator holder or mechanism 

35 68 which Is associated with a magnetic reader 69, 
a sensor 70, and an optical reader 71 (dashed 
lines 67). 

The mechanism 68 Includes means for provid- 
ing the timing signal ta— be In cooperation with 

40 the mechanism 68, the magnetic reader 69 trans- 
duces the megnetic stripe 18 (Rgures 1 and 4) to 
provide signals representative of the miscellane- 
ous statistical data DS and the encrypted data 
CW. The signals sensed by the magnetic reader 

46 69 ere provided to a register 72 during a timing 
interval Indicated, by a timing signal ta. 

Signal representations from the register 72 
comprising the encrypted data CW are applied to 
a cryptographic decoder 74 which functions dur- 

so ing an interval of timing signal tb to develop the 
signal representations AL, SD and CC which 
signals are placed in a register 76 during the 
interval of a timing signal tc Note that the 
decrypted data actually consists of the address 

66 data AU the critical statistical data DS and the 
uniqueness character data CC 

Recapitulating, the contents of the magnetic 
stripe 18 (Rgures 1 and 4) is sensed by the 
magnetic reader 69 to provide two separate data 

69 packages in the register 72, l.e. encrypted data 
CW and miscellaneous statistical data DS. The 
encrypted data CW is supplied to the crypto- 
graphic decoder 74 which operates to load the 
register 76 whh the separated and decoded data. 

65 The miscellaneous data DS from the register 72 
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remains In that location for use as will be 
explained below. 

The address data AL from the register 76 is 
applied to the sensor 70 (upper right) for control- 
ling that apparatus to observe the card C for b 
uniqueness data at the locations D1, 02, 03 and 
04 (Figure 1). Accordingly, fresh anti-counterfeit- 
fng, uniqueness character data CC Is sensed 
during signal td. Signals representative of the 
fresh uniqueness data CC' are applied to a com- to 
parator 7a Generally, the comparator 78 tests the 
freshly sensed uniqueness signals CC' with the 
previously recorded uniqueness signals CC 
(decoded from the encryption). The test serves to 
Indicate the genuine substance of the card C. n 

The optical reader 71 senses the critical statisti- 
cal data SO' providing representative signals to e 
comparator 79. Accordingly, In an action sup- 
plementary to confirming the genuine substance 
of the card, the statistical data signals are com- 20 
pared in the comparator 79 to verify the card 
content Specifically, the optical reader 71 pro- 
vides freshly sensed statistical data SO' for com- 
parison during signal td with the originally sensed 
statistical data OS from register 76, e_g. the 2s 
blrthdate "12-07-52". 

The comparators 78 (document genuine) and 
79 (document content) provide approval output 
signals to an AND gate 81 which Is also qualified 
by a timing signal te. On qualification, the occurr- so 
ence of a high signal from the AND gate 81 
indicates that the card is genuine and has not 
been altered with respect to the critical data. That 
output Is applied to a display unit 83 and to a 
recorder 84 Incorporating data processing caps- ss 
bflfty. The display unit 83 indicates the validity of 
the card C The recorder 84 records the fact that 
the card was tested and approved on e particular 
date. Essentially, the recorder 84 may include any 
of a variety of forms of bulk storage, e*g. magnetic 40 
tape, along with a control system for recording 
entries. Specifically in the disclosed embodiment, 
the recorder 84 operates during a timing Interval 
tf to record the critical data SO on approval and In 
a format indicating the data of the approval. ss 
Additionally, miscellaneous statistical data from 
the register 72 may be recorded to identify the 
card C, the bearer of the card, or both. The 
miscellaneous statistical data OS Is also supplied 
from the register 72 to a display unit 85 for direct so 
viewing. Output Is also to a file by gates 89 and 
81. 

To enhance an appreciation of the system of the 
present Invention, consider an exemplary oper- 
ation Involving specific use, Assume the exist- ss 
ence of a card as illustrated In figure 1 assigned 
to one "John J. Jones" and further assume that 
the assigned bearer has presented the card to 
identify himself as a person who has attained his 
maturity, Le. has reached the age of consent so 
Under the circumstances, assume that the card C 
Is placed in the authenticator mechanism 68 
(Figure 6) for tasting. 

From the magnetic stripe 18, the system pro- 
vides miscellaneous data signals OS to activate 65 
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the unit 85 with the display "Jones". Thus, a 
further identifier Is provided. Independently, the 
magnetic stripe data specifies the locations (01, 
02, 03 and 04) of the uniqueness data, the 
previously sensed values of such data, and the 
critical statistical data, "12-07-82". For compari- 
son, the uniqueness data and the critical statisti- 
cal data ere freshly sensed by the sensor 70 and 
the reader 71. Thus, the decoded original statisti- 
cal data SO Is compared with the freshly sensed 
statistical data SD\ In a proper situation, both 
would manifest "12-07-62" verifying card content 
In that regard. In such a situation, the comparator 
79 would partly qualify the AND gate 81. 

The test for card substance authenticity 
Involves the uniqueness signals CC (from the 
magnetic stripe) and CC' (freshly sensed). Those 
signals are applied to the comparator 78. In 
operation, the comparator 78 may be as set forth 
In the above-referenced Patent 4/423/416. An ade- 
quate degree of comparison produces the high 
level of a binary signal to further qualify the AND 
gate 81. As a consequence, at timing interval te 
the gate 81 is qualified to activate the display unit 
83 and the recorder 84. On activation, the display 
unit 83 manifests that the card Is genuine and 
unaltered with respect to the critical statistical 
data. Accordingly, the user of the system simply 
observes the display 85 to confirm the assigned 
card holder's name end the display unit 83 to 
observe that the card Is authentic. A reliable test Is 
thus performed to verify the holder's ege and his 
qualification to enter into a transaction requiring 
majority. To confirm the event of the test and the 
approval, the recorder 84 carries the statistical 
data If some question should develop at a future 
date. The recorder also may associate with other 
data processing apparatus that acts on the critical 
statistical data with the. assurance that It has been 
verified. As Illustrated, the system may be asso- 
ciated with processing apparatus incorporating a 
data file. Accordingly, the register 76 Is coupled to 
an output line 93 through the AND gate 89. 
Similarly, the register 72 supplies statistical data 
.through an AND gate 91 to an output line 95. The 
gates 89 and 91 are controlled by the approval 
signal from the gate 81 Indicating that the card 
tests are genuine and not altered. It may therefore 
be seen that upon testing an authentic document, 
data from the document Is captured for direct 
entry into a data file. 

From the above descriptions, It may be appreci- 
ated that a system Is disclosed for reliably verify- 
ing the genuine substance of a document and Its 
content, e.g, that the document has not been 
altered with regard to critical data. Various forms 
of the system may well be adapted to process a 
wide variety of different documents. For example, 
the system may be adapted for use with financial 
paper which may be sensed by machine and if 
tested as genuine the resulting data may be 
processed with a good degree of reliability. 
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1. An euthenticator device (C) which carries 
Information (16) In a visual format and which 
Includes a sheet (1 5) of a medium that has variable 
translucency from one location to another 
(01— D4Jofthesheet{15),andam8chine-reedeble 
record (18) of representations (CO of said trans- 
lucency as previously sensed at Identified loca- 
tions (Dl— 04) of the sheet (15), characterised In 
that the recorded representations (CO are com- 
bined in the machine-readable record (18) with 
data (SO) related to a previously sensed state of 
said Information (16), 

I An authenticetof device (C) according to Claim 
1 wherein said Information Is In printed form (16) 
on the sheet (15). 

3. An authenticate device (C) according to Claim 
1 or Claim 2 Including a magnetic stripe (18), and 
wherein.the machine-readable record Is recorded 
magnetically in the stripe (18). 

4. An authenticator device according to any one 
of Claims 1 to 3 wherein the sheet Is of paper (1 5). 

5. A method of authenticating a device (C) which 
carries Information (16) in a visual format and 
which Includes a sheet (15) of a medium that has 
variable translucency from one location to another 
(01—04) of the sheet (15), In which representa- 
tions (CC) of said translucency as sensed at 
identified locations (01— D4) of the sheet (15) are 
read from a machine-readable record (18) of the 
device (C) and are compared (78) respectively with 
translucency representations (CC') freshly sensed 
at said locations (01—04), and In which indication 
(83) of euthenticfty of the device (C) Is provided in 
dependence upon the result of the comparison, 
characterised in that data (SO) which Is combined 
with the readout representations (CC) In the 
machine-readable record (18) is also read out and 
compared (79) with data (SO*) freshly-derived 
from the said information (16) carried by the 
device (O, and that the provision of said Indication 
(83) of authenticity Is also dependent upon the 
result of this latter comparison (79). 

6. A method according to Claim 5 wherein the , 
said information Is in printed form (16) on the 
sheet (15). 

7. A method according to Claim 6 or Claim 6 
wherein the device (C) Includes a magnetic stripe 
(1 8), and the machine-readable recordls read from 
the stripe (18). 

8. A method according to any one of Claims 6 to 

7 wherein the sheet is of paper (1 5). 

9. A method according to any one of Claims 5 to 

8 wherein at least one (03) of said locations lies 
within a region of said sheet (15) that contains 
indicia (16) representing said Information, to the 
effect that the representation (CO of sensed 
translucency at such location (03) Is affected by at 
least one ("2") of said Indicia (16). 

10. A method according to any one of Claims 5 to 

9 wherein the data derived from said Information 
(16) carried by the device (O la data (SO*) read out 
from the device (C) by an optical reader (71). 

1 1 . A method according to any one of Claims 6 to 



10 wherein the said representations (CC) and data 
(SO) ere read out from the machine-readable 
record (18) In encrypted form and are submitted to 
decryption (74) before their comparison (78, 79) 

€ with thefreshiy-sertsed representations (CC') and 
freshly-derived data (SOI respectively. 

12. A processor for authenticating a device (O 
which carries Information (16) In a visual format 
and which Includes a sheet (16) of a medium that 

to has variable translucency from one location to 
another (01—04) of the sheet (16), and a machine- 
readable record (18) of representations (CC) of said 
translucency as sensed at Identified locations 
(01-04) of the sheet (15), the processor Including 

is reading means (69) for reading out the said 
translucency representations (CC) from the 
machine-readable record (18). sensing means (70) 
.for freshly sensing the translucency representa- 
tions (CC) at said Identified locations (01— 04) of 

20 the sheet (15). and comparator means (78, 79) for 
comparing the freshly-6ensed translucency 
representations (CC) with the translucency 
representations (CC) read out to provide an indica- 
tion (83) of authenticity of the device (C) in 

25 dependence upon the result of the comparison, 
characterised In that the processor also Includes 
means (71) for sensing said Information (16) 
carried by the device (C) to derive data (SO') 
freshly In accordance therewith, and that the 

so reading means (69) reads out from the machine- 
readable record (18) data (SO) combined with the 
read-out translucency representations (CO, and 
that the comparator means (7B, 79) compares the 
freshly-derived data (SO') with the read-out data 

$5 (SO) and provides add Indication in dependence 
upon the result of this comparison (79) as weH as 
upon the result of the comparison (78) between the 
freshly-sensed and read-out translucency 
representations (CC, CC). 

40 13. A processor according to Claim 12 wherein 
the machine-readable record Is recorded In a 
magnetic stripe (18) of the device (C), and the said 
reading means Is a magnetic-stripe reader (69). 

14. A processor according to Claim 12 or Claim 
45 13 wherein the means f or sensing said information 

(16) from the device (C) is an optical reader (71). 

15. A processor according to any one of Claims 
12 to 14 wherein the recorded representations (CC) 
and data (SO) are read out from the machine- 
so readable record (18) In encrypted form, and the 

processor includes decryption means (74) for 
decrypting them before they are applied to the 
comparator means (78, 79) for comparison with 
the freshly-sensed representations (CC) and 
& freshly-derived data (SO') respectively. 

Patentansprucha 

1. Vorrichtung (C) rum Echtheitsnachweise mlt 
«9 slchtbaren Informationen (16) und mlt einer Folie 
(15) bus elnem Material mlt vartte render Durch- 
slchtigkeftvon einer Stellezu einer anderen Stelle 
(01—04) der Folie (15), und mft einer maschlnen- 
lesbaren Aufzelchnung (18) von KanngrdOen (CC) 
55 der Durchstehtigkeft die an bestimmten Stellen 
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(01—04) der Folie (15) vortier errnfttett worden 
efnd, dadurch gekennzeichnet, daB die eufge- 
zeichneten KenngrMen (00 In dermaschlnenlea- 
baron Aufzeichnung (18) mit Daten (SO) kombi- 
nlert werden, die zu elnem vortier ermftterten a 
Zu stand der Information (16) in fcriehung siehen. 

2. Vorrichtung (C) zum Echthaftsnachwalsa 
nach Anspruch 1, wobel die Information aich in 
gedruckter Form (16) auf der Fdlie (16) befindet 

3. Vonichtung (Q zum Echthettenachwels nach ro 
Anspruch 1 oder 2, mtt einem Magnetstreffen (18) 

und wobel die maschlnenlesbare Aufzeichnung 
auf dem Streifen (18) magnetisch aufgezeichnet 
wird. 

4. Vonichtung zum Echthertsnachwda nach is 
elnem der Anspruche 1 bis 3, wobel die Folio aua 
Papier (15) beateht 

6. Verfahren zur EchtheltsprOfung einer Vonich- 
tung (C), die in alchtbarer Form informationen 
(16) trfigt und eine Folie (15) aus einem Material 20 
airfwefst, das von elner Stelie zu einer anderen 
Staile (01—04) der Folie (1 5) eine variable Durch- 
sichtigkett aufweist, wobei KenngroBen (CC) der 
Druchsichtigkeit, die an bestimmten Steilen 
(01—04) der Fdlie (15) errnfttett warden, von is 
einer maschinenlesbaren Aufzeichnung (18) der 
Vonichtung (C) gelesen und entsprechend mlt 
DurchsichtigkertskenngrSBen (CC') verglichen 
(78) werden, die an dan Steilen (01—04) neu 
ermrttelt worden mnd, und wobe? eine Angabe so 
(83) der Authentizhat der Vonichtung (C) in 
Abhdnglgkert vom Vergleichsreauftat gegeben 
wird, dadurch gekennzeichnet dak die Daten (SO) 
die mft den auageiesenen KenngroBen (CC) in der 
maschinenlesbaren Aufzeichnung (1 8) kombinJert ss 
warden, ebenfalis ausgelesen und mit Oaten (SO') 
verglichen (79) warden, die aua dan auf der 
Vonichtung (C) enthaltenen Informationen (16) 
neu ermrttelt worden Bind, und daB die Angabe 
(83) der AiithentizftSt femer in AbhSnglgkaft vom 40 
Ergebnis dieses letzten Verglelcha (79) gegeben 
wird. 

6. Verfahren nach Anspruch 5, wobel die Infor- 
mation in gedruckter Form (16) auf der Folie (15) 
voriiegt 45 

7. Verfahren nach Anspruch 5 oder 6, wobel die 
Vonichtung (C) einen MagnetstreKen (18) auf- 
weist und die maschlnenlesbare Aufzeichnung 
von dem Streifen (18) gelesen wird. 

8. Verfahren nach einem der Anspruche 5 bis 7, bq 
wobel die Folie aus Papier (15) beateht 

a Verfahren nach einem der Anspruche 5 bis 8, 
wobel mindestens eine (03) der Steilen Innerhalb 
eines Bereichs der Folie (15) Hegt, der Kennzei- 
chen (16) fQr die Information enthitt, so da B die a 
KenngrdOe (CC) der gemessenen DurchsichtJgkelt 
an dlesar Stelie (03) durch mindestens eine ("2") 
der Kennzeichnungen (16) beelnfluBt wird. 

10. Verfahren nach einem der Ansprflche 6 bis 

8, wobel die von der Information (16) auf der so 
Vonichtung (C) abgeleiteten Oaten seiche Oaten 
(SO') aind, die von der Vonichtung (C) mit Hilfe 
eines optischen LesegenHs (71) ausgelesen 
werden. 

11. Verfahren nach einem der Ansprflche 5 bis as 
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10, wobel die KenngroBen (CO und Oaten (SD) 
aus der maschinenlesbaren Aufzeichnung (18) in 
verschlflssetor Form ausgelesen und vor ihrem 
Vergleich (78, 79) mft den neu ermfttetten Kenn- 
groBen (CC') bzw. den neu abgeJefteten Oaten 
(SO') entschlflaselt (74) werden. 

12. Prozessor zum Echtheltsnachweise einer 
Vonichtung (C), die Informationen (16) In alchtba- 
rer Form trfigt und eine Folie (15) aus elnem 
Material aufwelst, das In Abhinglgkeit vom Ort 
(D1— 04) der Fdlie (15) eine variable Durchsichtig- 
keft aufwelst, und mft elner maschinenlesbaren 
Aufzeichnung (18) der KenngrdBen (CC) der an 
bestimmten Steilen (01— D4) der Folie (15) 
gemessenen Durchslchtigkeit, wobel der Prozes- 
sor eine Leseeinrichtung (69) zum Auslesen der 
DurchsIchtigkettskenngrdBen (CO aus der 
maschinenlesbaren Aufzeichnung (18), eine Sen- 
soreinrichtung (70) zum neu Ausmessen der 
DurchstortlgkaftskenngroBen (CC) an den 
bestimmten Steilen (01—04) der Folie (15) sowie 
einen Vergleicher (78, 79) zum Vergleichen der 
neu gemessenen DurchsichtlgkeitskenngroBen 
{CC') mlt den ausgeiesenen Durchsichtigkeits- 
kenngrfiBen (CC) aufwelst, urn eine Angabe (83) 
der AuthentizItSt der Vorrichtung (C) in Abhanglg- 
kelt vom Verglelchsergebnis auszugeben, 
dadurch gekennzeichnet, da& der Prozessor far- 
ner eine Einrichtung (71) zum Ermitteln der von 
der Vorrichtung (C) gespeicherten information 
(16) aufwelst urn dementsprechend neue Daten 
(SD') abzuletten, daB die Leseeinheft (69) aus der 
maschinenlesbaren Aufzeichnung (18) Oaten (SD) 
In Kombination mit dan ausgeiesenen Durchsich- 
tigkeitskenngrdBen (CC) ausliest und daB der 
Vergleicher (78, 79) die neu abgeleiteten Daten 
(SD*) mit den ausgeiesenen Daten (SD) vergleicht 
und die Angabe in Abhinglgkeit von diesem 
Vergleichsergebnis sowie In Abhinglgkeit von 
dem Verglelchsergebnis (78) zwischen den neu 
gemessenen und ausgeiesenen DurchsichtJg- 
keitstenngroBen (CC, CC) ausglbt 

13. Prozessor nach Anspruch 12, wobei die 
maschlnenlesbare Aufzeichnung in einem 
Magnatstreifen (18) der Vorrichtung (C) aufge- 
zelchnet 1st und die LeseeinheH ein Magnetstrei- 
fenleser (69) 1st 

14. Prozessor nach Anspruch 12 oder 13, wobei 
die Einrichtung zum Ermitteln der Information 
(16) auf der Vorrichtung (C) ein optisches Lesege- 
rfit (71) 1st 

15. Prozessor nach einem der Ansprflche 12 bis 
14, wobei die aufgezelchneten KenngroBen (CC) 
und Daten (SD) eus der maschinenlesbaren Auf- 
zeichnung (18) In verschlusselter Form ausgele- 
sen werden und der Prozessor eine EntschlQsse- 
lungsefnheit (74) aufwelst, urn diese vor dem 
ZufQhran zu dem Vergleicher (78, 79) zum Verglei- 
chen mh den neu gemessenen KenngroBen (CC) 
bzw. den neu abgeleiteten Oaten (SO 1 ) zu ent- 
schlOsseln. 

Revendlcations 

1. DIsposftrf authentificateur (C) qui porta una 
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Information (16) en une presentation visible at qui 
comprend une feullle (16) d'un support qui pre- 
sente une transtudcfitB variable d'un emplace- 
ment a un autre (01-04) de la feullle (ML el un 
cnreglstremeiTt (18), assimilable par machlna.de 5 
representations (CC) de ladite transludite telle que 
captee prfcWemment en des emplacements 
Identifies (01— D4) de la feullle (15), caracterfs6 en 
ee que lea representations enreglstrtes (CC) i sont 
combinees dans I'enregis^ n 
par machine avec des donnees (SO) lieesaunftat 
precedemment capt6 de ladite Information (16). 

Z Dispositif authentificateur (C) seton la reven- 
dication 1, dans tequel ladite Information est sous 
une forme Imprimee (16) sur la feullle (15). w 

a Dispositif authentificateur (C) salon la reven- 
dication 1 ou la ravandication % comprenant une 
bande magnetique (18), et dans toque! 
trament assimilable par machine est enregtstre 
magnetiquement dans la bande (6). *> 

4. Dispositif authentificateur seion Tune quel- 
conque des revendications 1 a 3, dans Sequel la 
feullle est en papier (15). 

5. Proce^ie tfauthentificaton (Tun dispositif (C) 

qui porta une information (16) en une presents- 25 
tion visible et qui comprend une feuflle (15) d'un 
support qui presente une translucidite variable 
tfun emplacement a un autre (D1— 04) de la 
feullle (15), dans lequel des representations (CC) 
de ladite translucidite telles que captees en des 30 
emplacements identifies (01—04) de la feuUle 

(15) sont lues a partir d'un enregistrement (18), 
assimilable par machine, du drspositif (C) et sont 
compares (78) respectivement a des representa- 
tions (CC) de la translucidite, fralchement cap- 35 
tees auxdits emplacements (D1— D4), et dans 
lequel une Indication (83) de I'authentidte du 
dispositif (C) est foumle en fdnction du resultat de 

la comparaison, cara dense en ce que des don- 
nees (SO), qui sont combinees aux represents- 40 
tions lues (CC) dans ('enregistrement (18) assimi- 
lable par machine, sont egslement lues et compa- 
res (79) a des donnees {SO') fratchement 
deduites de ladite Information (16) portee par te 
dispositif (C), et en ce que la fourniture de ladite 45 
Information (83) de I'authentidte depend aussi du 
resultat de cette demiere comparaison (79). 

6- Precede seion la revendication 6. dans lequel 
ladite Information est sous une forme imprimee 

(16) sur la feullle (15). « 
7. Proc6de seion la revendication 5 ou la reven- 
dication 6, dans lequel le dispositif (C) comprend 

une bande magnetique (18), et renreglstrement 
assimilable par machine est lu sur la bande (18). 

a Precede seion I'une quelconque des revendi- ss 
cations 6 a 7, dans lequel la feullle est en papier 
(15)- 

a Proc6d6 seion I'une quelconque des revendi- 
cations 6 a 8, dans lequel au moins run (03) 
desdits emplacements t'etend dans une region eo 
de ladite feullle (16) qui contient des slgnes (16) 
representant ladite Information, afln que le repce- 
sentation (CC) de la translucidite captee a cet 
emplacement (03) sort affectee par au molna Tun 
("2") desalts slgnes (16). 68 



10. Precede seion I'une quelconque des iwen- 
dicationa 6 A 0, dans lequel les donnees deduttea 
de ladite Information (16) portee par le dispositif 
(C) sont des donnees (SO 1 ) lues sur le dispositif 

(C) par un lecteur optique (71). 

11. Precede seion I'une quelconque des reven- 
dications 5 a 10, dans lequel lesdites representa- 
tions (CO et lesdites donnees (SO) sont lues sur 
renreglstrement (18) assimilable par machine 
sous une forme chlffree et sont soumfees a un 
dechfffrement (74) avant teur comparaison (78, 
79) avec les representations fratchement captees 
(CC 1 ) et les donnees fralchement dedultes (SD / ) 
respectivement 

12. Precesseur pour authentifier un dispositif 
(C) qui porta une Information (16) en une presen- 
tation visible et qui comprend une feullle (15) d'un 
support qui presents une translucidite variable 
d'un emplacement a un autre (01—04) de la 
feullle (15), et un enregistrement (18), assimilable 
par machine, de representations (CC) de ladite 
translucidite telles que captees en des emplace- 
ments identifies (01— 04) de la feuflle (15), le 
precesseur comprenant des m ovens de lecture 
(69) destines a lire lesdites representations (CC) 
de translucidite sur le support (18) assimilable par 
machine, des moyens de captage (70) destines a 
capter de facon nouvelle lea representations (CC ) 
de translucidite auxdits emplacements identifies 
(D1— 04) de la feullle (15), et des moyens compa- 
rateura (78, 79) destines a comparer las represen- 
tations (CC') de translucidite no uvel lament cap- 
tees avec les representations (CC) de translucidite 
lues pour donnar une indication (83) de I'authenti- 
dte du dispositif (C) en fonction du resultat de la 
comparaison, caracterise en ce que le precesseur 
comprend aussi des moyens (71) destines a cap- 
tar ladite information (16) portee par le dispositif 
(C) pour dedulre des donnees (SD') de maniere 
nouvelle conformSment a cette Information, et en 
oe que les moyens de lecture (69) iisent sur 
renreglstrement (18) assimilable par machine des 
donnees (SO) combinees aux representations 
(CO de translucidite lues, et en ce que les moyens 
comparators (78, 79) comparent les donnees 
(SD') nouvellement dedultes avec les donnees 
lues (SD) et produteent ladite Indication en fonc- 
tion du resultat de cette comparaison (79) ainsi 
que du resultat de la comparaison (78) entre les 
representations de translucidite (CC, CC) nouvel- 
lement captees et lues, 

13. Precesseur seion la revendication 13, dans 
lequel renreglstrement assimilable par machine 
est enregistre dans une bande magnetique (18) 
du dispositif (C), et lesdits moyens de lecture 
comprennent un lecteur (69) de bande magneti- 
que, 

14. Precesseur seion la revendication 12 ou la 
revendication 13, dans lequel les moyens de 
captage de ladite Information (16) sur le dispositif 
(C) comprennent un lecteur optique (71 )• 

15. Precesseur seion I'une quelconque des 
revendications 12 a 14, dan6 lequel les represen- 
tations enregistrees (CC) et les donnees (SD) sont 
lues sur le support (18) assimilable per machine 
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sous une forme chffWe, et le processeur corn- 
prend des moyens de dfchfffrement (74) destines 
6 lea dlchfffrar avant qi/elfes aoient appllqutes 
aux moyens oomparateura (78, 79) pour une 
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comparateon avec lea representations nouvelte- 
ment capttes (CC) et lea donn&s nouvellemertt 
d6duttes (SD f ), respectivenxmt 
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